Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,736All CVEsplus 19,141 rejected
- 659Last 24 hours3,036 in the last 7 days
- 17,189Last 30 days1,611 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 3 | 0 | 0 | 0 | 3 | 32 |
| 2025 | 1 | 3 | 5 | 1 | 0 | 10 | 29 |
| 2024 | 1 | 3 | 4 | 0 | 0 | 8 | 19 |
| 2023 | 0 | 3 | 5 | 0 | 0 | 8 | 11 |
| 2022 | 0 | 0 | 1 | 0 | 0 | 1 | 3 |
| 2021 | 0 | 1 | 1 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-56428 | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An…Bosch · BSH ELP (Electronic Platform) Modules | High8.1 |
| CVE-2026-60135 | Weintek cMT3092X Incorrect User ManagementWeintek · cMT3092X firmware | High7.1 |
| CVE-2026-35638 | OpenClaw < 2026.3.22 - Privilege Escalation via Self-Declared Scopes in Trusted-Proxy Control UIOpenClaw · OpenClaw | High8.7 |
| CVE-2025-64725 | Weblate has improper validation upon invitation acceptanceWeblateOrg · weblate | Low1.0 |
| CVE-2025-63563 | Summer Pearl Group Vacation Rental Management Platform prior to v1.0.2 does not properly invalidate active user sessions after a password change. This allows… | Medium6.5 |
| CVE-2025-59943 | phpMyFAQ duplicate email registration allows multiple accounts with the same emailthorsten · phpMyFAQ | High8.1 |
| CVE-2025-7972 | Rockwell Automation FactoryTalk® Linx Network Browser Security Bypass VulnerabilityRockwell Automation · FactoryTalk® Linx | High8.4 |
| CVE-2024-48853 | Authenticated Escalation to guest to rootABB · ASPECT-Enterprise | Critical9.5 |
| CVE-2024-46671 | An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and…Fortinet · FortiWeb | Medium5.6 |
| CVE-2024-58105 | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a local attacker to bypass existing security and execute…Trend Micro, Inc. · Trend Micro Apex One | High7.3 |
| CVE-2024-45425 | Zoom Workplace Apps - Incorrect User ManagementZoom Communications, Inc · Zoom Workplace Apps | Medium4.9 |
| CVE-2024-6356 | Incorrect User Management in GitLabGitLab · GitLab | Medium4.4 |
| CVE-2024-13041 | Incorrect User Management in GitLabGitLab · GitLab | Medium4.2 |
| CVE-2024-52359 | IBM Concert Software improper access controlsIBM · Concert Software | Medium4.3 |
| CVE-2024-9312 | Authd, through version 0.3.6, did not sufficiently randomize user IDs to prevent collisions. A local attacker who can register user names could spoof another…Canonical Ltd. · Authd | High7.5 |
| CVE-2023-26689 | An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted post request. | Critical9.8 |
| CVE-2024-28020 | A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the…Hitachi Energy · FOXMAN-UN | High8.0 |
| CVE-2024-27269 | IBM QRadar SIEM information disclosureIBM · QRadar SIEM | Medium6.8 |
| CVE-2022-35503 | Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via… | High7.5 |
| CVE-2024-29296 | A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time… | Medium5.3 |
| CVE-2023-51750 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur. NOTE: the vendor's position is "Not vulnerable if… | Medium4.6 |
| CVE-2023-3907 | Improper User Management in GitLabGitLab · GitLab | Medium4.9 |
| CVE-2023-3115 | Incorrect User Management in GitLabGitLab · GitLab | Medium5.4 |
| CVE-2023-3914 | Incorrect User Management in GitLabGitLab · GitLab | Medium5.4 |
| CVE-2023-20253 | A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass…Cisco · Cisco SD-WAN vManage | High7.1 |
| CVE-2023-25519 | NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host may cause an incorrect user management…NVIDIA · BlueField 1 | High7.8 |
| CVE-2023-3932 | Incorrect User Management in GitLabGitLab · GitLab | High8.2 |
| CVE-2023-0857 | Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office…Canon Inc. · Canon Office/Small Office Multifunction Printers and Laser Printers | Medium5.9 |
| CVE-2022-45857 | An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a…Fortinet · FortiManager | Medium6.0 |
| CVE-2022-32260 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application creates temporary user credentials for…Siemens · SINEMA Remote Connect Server | Medium6.5 |
| CVE-2021-26262 | Philips MRI 1.5T and 3T Improper Access ControlPhilips · MRI 1.5T | Medium5.9 |
| CVE-2021-21553 | Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user…Dell · PowerScale OneFS | High7.3 |